@NetworkNerd said:

Supposedly there is no software to install on any endpoint. But without that, how are you going to handle and filter traffic for roaming devices? Maybe I missed something as I glanced over their literature.

probably because either they forgot about roaming devices, or they expect you to set DNS to their public IPs regardless of where you are, which we all know probably won't work.